[SQU] DNS problem with ACLs

From: Werner Backes <w.backes@dont-contact.us>
Date: Fri, 13 Oct 2000 16:21:27 +0200

Hi,

I use squid2.3.stable4 and have the following problem:
Every time squid reads the config file it complains about
"aclParseIpData Bad host/IP: xyz" where xyz is a host from
my acl. The acl src is a file which contains several hostnames.
Every time I start/restart squid there are other hostnames that
cannot be found. When I start squid for the first time, this
happens for nearly all hosts in my file. If I restart squid
several times, I get less errors and after 3-4 restarts it can
resolve all hostnames without problems.

The hosts names are not fully qualified but belong to the local
domain. This domain is set via "append_domain" in the squid.conf
and in "/etc/resolv.conf". The machine has a local named which
is secondary for this domain so it should not have problems
resolving this hosts. I checked this using nslookup, ping, etc..

The operating system is Solaris 2.8. I tried to disable host
lookup caching via nscd but this makes things even worse.
I enabled debugging on nscd an found that the problems occure
for hosts that are not present within the nscd cache.
With every restart of squid the nscd cache fills with more hosts.
At the end, all requests from squid can be satisfied directly
from the nscd cache and everything works.
I had a look at the source ("acl.c"). The hostnames are resolved
using the "gethostbyname" function which is according to the man
page should not be used for mutithreaded application. Can this
be the problem? I couldn't find a solution until now.. only the
workaround to place full qualified hostname into my acl src.
Btw.: the acl src is farely large, about 900 entries.
Maybe I should also mention that my DNS seems to work fine for
everything else, except this squid problem...

Someone has a clue what I did wrong? :(

regards
          Werner

 

-- 
Werner Backes   --- Saarbruecker Zeitung --- ITS/UNIX  --------------
w.backes@sz-sb.de - Tel: +49 (681) 502-1365 - Fax: +49 (681) 502-1587
--
To unsubscribe, see http://www.squid-cache.org/mailing-lists.html
Received on Fri Oct 13 2000 - 08:24:25 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 16:55:45 MST